Turn off SNMP on Brocade

[hpuxrox]

Can someone help with this, I need to get this disabled asap.

[James A. Donovan]

Login as admin to your switch and run agtcfgShow. You can run 'help agtcfgShow' to get more info.

agtcfgSet Set SNMP agent configuration
agtcfgShow Print SNMP agent configuration
agtcfgDefault Reset SNMP agent to factory default

[hpuxrox]

Nice lead, but I dont see where I can turn it of... I would hate to loss it from the network because of this...

[James A. Donovan]

The agt* commands are only used to set/show the SNMP configuration. Completely seperate from the network config of the console port.

set swEventTrapLevel = 0 to disable traps

sansw1:admin> help agtcfgset

NAME
agtcfgSet - change the SNMP agent configuration

SYNOPSIS
agtcfgSet

AVAILABILITY
admin

DESCRIPTION
This command allows 'admin' to change the configuration of the SNMP agent in the switch.
o sysDescr - the system description (in MIB-II definition). The default value is set as "Fibre Channel Switch".

o sysLocation - the location of the system (switch) (in MIB-II).
The default value is set as "End User Premise".

o sysContact - the contact information for this system (switch).
the default value is set as "Field Support".

o swEventTrapLevel - the event trap level in conjunction with the an event's severity level. When an event occurs and if its severity level is at or below the set value, the SNMP trap, swEventTrap, is sent to configured trap recipients. By default, this value is set at 0, implying that no swEventTrap is sent. Possible values are
0 - none
1 - critical
2 - error
3 - warning
4 - informational
5 - debug

See errShow for related information.

o authTraps - should the authentication trap, authenticationFailure, be transmitted to configured trap recipient in the event the agent received a protocol message that is not properly authenticated. In the context of SNMPv1 and SNMPv2c, this means that a request contains a community string is not known to the agent.
The default value for this parameter is 0 (disabled).

In addition, there are six communities and respective trap recipients supported by the agent. The first three communities are for read-write access (rw) and the last three are for read-only access (ro).
Note that the factory default value for the trap recipient of each community is '0.0.0.0'. The factory default values for the community strings are:

1. 'Secret C0de',
2. 'OrigEquipMfr',
3. 'private',
4. 'public',
5. 'common', and
6. 'FibreChannel'.

Note that in order for an SNMP Management Station to receive a trap generated by the agent, the adminstrator must configure a trap recipient value to correspond to the IP address of the Management Station.

In addition, there are six ACL (Access Control List) to restrict SNMP get/set operations to hosts under a host-subnet-area.
Host-subnet-area is defined by comparing non-zero IP octets. For example, ACL of '192.168.64.0' allows for access by any hosts that start with '192.168.64' regardless of fourth octet. Each ACL entries also have a flag to set each host-subnet-area to be read-write or read-only. Highest previlege matched out of six entries is given to the access.

ACL check is turned off when all six entries contain '0.0.0.0'.

OPERANDS

none

EXAMPLE
sw5:admin> agtcfgSet

Customizing MIB-II system variables ...

At each prompt, do one of the following:
o to accept current value,
o enter the appropriate new value,
o to skip the rest of configuration, or
o to cancel any change.

To correct any input mistake:
erases the previous character,
erases the whole line,
sysDescr: [FC Switch]
sysLocation: [End User Premise]
sysContact: [Field Support.]
swEventTrapLevel: (0..5) [3]
authTrapsEnabled (true, t, false, f): [true]

SNMP community and trap recipient configuration:
Community (rw): [Secret C0de]
Trap Recipient's IP address in dot notation: [192.168.1.51]
Community (rw): [OrigEquipMfr]
Trap Recipient's IP address in dot notation: [192.168.1.26]
Community (rw): [private]
Trap Recipient's IP address in dot notation: [0.0.0.0] 192.168.64.88
Community (ro): [public]
Trap Recipient's IP address in dot notation: [0.0.0.0]
Community (ro): [common]
Trap Recipient's IP address in dot notation: [0.0.0.0]
Community (ro): [FibreChannel]
Trap Recipient's IP address in dot notation: [0.0.0.0]

SNMP access list configuration:
Access host subnet area in dot notation: [0.0.0.0] 192.168.64.0
Read/Write? (true, t, false, f): [true]
Access host subnet area in dot notation: [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Access host subnet area in dot notation: [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Access host subnet area in dot notation: [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Access host subnet area in dot notation: [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Access host subnet area in dot notation: [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Committing configuration...done.
value = 1 = 0x1
sw5:admin>

SEE ALSO
agtcfgShow, agtcfgDefault
swmib.smiv1 - Brocade Switch Management Information
swtrap.smiv1 - Brocade Enterprise Specific Trap
RFC1157 - A Simple Network Management Protocol (SNMPv1)
RFC1213 - Management Information Base for Network Management of
TCP/IP-based internets: MIB-II

[hpuxrox]

I dont see where it is turned off?

[Greg Hanzelka]

snmpMibCapSet

Set options for configuring SNMP Mib/Trap Capability

If you just type help it will list all the avaiable commands with descriptions.

[Daniel Malcor]

I have tried answering "No" to every prompt from snmpMibCapSet and the network people tell me that SNMP is still on on my switch.

Anyone got anything beyond "Read the Fine Manual"?